Privacy Statement

Company website information

The company website does not provide user accounts, does not currently accept payments and does not include a contact form. Bluestone Forge does not intentionally collect sensitive information through the company website.

If you email us, we may receive the information you choose to provide, including your name, email address, message and any files or other details you include. Please do not send sensitive information unless it is necessary for your enquiry.

When you visit the website, Cloudflare and other infrastructure providers involved in delivering and protecting the site may automatically process technical information. This can include your IP address, browser and device information, requested pages, timestamps, approximate location derived from an IP address, network and security events, and server or performance logs.

What Curly Questions collects

• If you create a community account, we collect the email address, username, password authentication data, and account identifiers needed to run that account.
• If you scan a QR code and connect a callsign, we store the 16 by 16 callsign grid, callsign hash, linked user ID, and the game seat/session that created the link.
• When a game session is submitted, we store callsign grids, scores, rankings, mini-game IDs, session IDs, seat positions, timestamps, and related game metadata.
• If location features are enabled later, any location value will be optional and used for leaderboard filtering only where you choose to provide it.

What the iPad sends

• The iPad sends callsign grids, scores, game/session IDs, seat information, and game metadata.
• The iPad does not send player names, email addresses, phone identifiers, or personal device identifiers.
• Players who do not scan the QR code are recorded as guests unless the backend can attribute a previous callsign match.

Analytics and cookies

The current website deployment includes Cloudflare browser-insights technology to help us understand site performance and reliability. The website’s own code does not set analytics cookies or include advertising trackers. Cloudflare may process technical usage and performance information as part of providing its services.

If the website’s use of analytics, cookies or similar technologies changes, this policy will be updated and any consent mechanism required by applicable law will be provided.

How information is used

• We use account information to let you sign in, manage your profile, and link your callsign.
• We use callsigns and score data to display profiles, game history, leaderboards, recent games, and community activity.
• We use technical logs and error information to debug, secure, and improve the service.
• We use website and email information to respond to enquiries, operate and secure the website, and meet legal obligations.

Sharing and service providers

• Bluestone Forge does not sell personal information.
• We use service providers such as Supabase and Vercel to host authentication, database, application, and deployment infrastructure. We also use Cloudflare to deliver, protect and monitor the company website.
• These providers may process data outside Australia depending on their infrastructure and the selected project region.

We may also disclose information where required or authorised by law, or where reasonably necessary to protect legal rights, safety or security.

Account control

• You can request access to, correction of, or deletion of your account information by contacting us.
• Deleting an account removes the login and profile association. Historic game rows may be retained for scoreboard integrity, but they will no longer be attached to your account.

Social media and external links

The website links to Instagram, TikTok and the separate Curly Questions website. Following an external link may allow that external service to receive technical information associated with your visit. External websites have their own privacy practices, and Bluestone Forge is not responsible for how those services handle information.

Overseas processing

Supabase, Vercel, Cloudflare and providers used to manage email may process information in Australia and other countries depending on their infrastructure and the selected project region. Privacy protections in another country may differ from those in Australia.

Security and retention

• We use Supabase authentication, access controls, server-side service credentials, and row-level database policies to protect account and community data.
• No online service can guarantee perfect security, but the community site is designed to collect only the information needed for account linking and leaderboards.

We retain information only for as long as reasonably needed for the purpose for which it was collected, to maintain appropriate records, preserve scoreboard integrity, resolve disputes, or meet legal obligations. Technical logs may be retained by service providers according to their settings and practices.

Privacy questions and complaints

• You can contact us if you have a privacy question, want to access or correct information we hold about you, or want to make a privacy complaint.
• We will review privacy complaints and respond using the contact details you provide.

Children’s privacy

The company website provides general information about Bluestone Forge. Curly Questions guest play does not require a player name or email address. If you believe a child has provided personal information through an account or enquiry without appropriate permission, please contact us so we can review and, where appropriate, delete or de-identify it.

Changes to this statement

We may update this statement when the website, Curly Questions, our practices or applicable requirements change. The revised statement will be published on this page with a new effective date.

Contact

For privacy questions, access requests, correction requests, deletion requests, or complaints, email [email protected].

Bluestone Forge Pty Ltd
Melbourne, Victoria, Australia